0 Replies Latest reply on Jan 7, 2013 3:48 PM by Larry Compton

    Cert-Based Authentication Configuration - JBoss 7.1.1

    Larry Compton Newbie

      I'm trying to configure certificate-based authentication in a web application deployed in JBoss 7.1.1. I appear to have SSL configured correctly, but I'm having problems configuring my web application to authenticate. To verify authentication, I have a simple JSP that echoes the user name via the scriptlet snippet <%= request.getRemoteUser() %>. I've attached a number of related files to this posting and have a number of questions...

       

      • If I comment out the "security-constraint" section of "web.xml", access to "index.jsp" is granted, but the value returned by "getRemoteUser()" is null. I'm assuming this is incorrect behavior. Am I missing something in my configuration files? Do I need "jboss-web.xml"?
      • In order to associate roles with my users, I presumably need to add entries to "application-roles.properties". What key do I use for the entries, the user certificate DN? If so, how do I extract the DN from a PKCS12 file in a format that's compatible with "application-roles.properties"? I know that spaces and "=" signs need to be escaped, but I'm also concerned about the order of the subordinate key/value pairs in the DN.
      • I've seen references to a file named "defaultRoles.properties", but I can't find any examples of the file syntax or how to configure its use. In my case, I don't need fine-grained user to role mapping. Assigning a set of default roles to any user with a valid certificate would be fine. How do I configure "defaultRoles.properties"?

       

      Thanks for your help.

      Larry